This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json) Hash identifier: 8vAp6G7tBc0b4Ga3FR7pnqD6Oa2nOIe73f4RL1rHMqY= Subject key identifier: 20:43:1B:15:85:81:34:94:2E:40:99:EA:66:F7:B7:5C:70:57:4B:2C Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Certificate serial: 019B3EDABD5530F82E5F6FF12A1124190196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft Manifest number: 0AAB Signing time: Sun 21 Dec 2025 03:01:21 +0000 Manifest this update: Sun 21 Dec 2025 03:01:21 +0000 Manifest next update: Mon 22 Dec 2025 03:01:21 +0000 Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: xznXyE4MaQQN0yLsDlH+hMfs9CHamtZAgza5v3BBVCo=) 2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:bd:55:30:f8:2e:5f:6f:f1:2a:11:24:19:01:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Validity Not Before: Dec 21 03:01:21 2025 GMT Not After : Dec 22 03:01:21 2025 GMT Subject: CN=20431b15858134942e4099ea66f7b75c70574b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:64:31:68:c9:c0:c3:cc:d9:6f:d5:da:97: a6:5a:7c:e9:2d:44:6b:8f:b6:07:4e:f9:a9:a1:80: 73:a7:15:04:1d:92:5d:f7:cd:0a:cd:2e:e5:c2:7a: ea:99:7f:5c:df:02:0b:be:f0:6e:3c:fa:ce:32:82: a2:00:c4:6f:ea:fa:18:8f:cd:a0:91:24:a0:3a:61: bb:7c:44:ac:51:a0:c1:25:49:57:dd:6f:df:70:a3: 93:01:45:01:4d:f1:fc:d0:f4:d4:c4:5f:e6:e5:78: bb:ad:e9:17:14:63:31:8b:06:47:85:9f:e1:31:14: 9a:b8:77:41:1d:40:94:5d:6d:13:68:ce:e9:f4:0c: 7d:3f:f1:ee:ff:b2:87:f4:81:05:55:b8:e8:e7:96: 19:8a:71:c3:58:6a:64:95:a2:18:ea:6d:0b:95:0e: 0c:bb:35:16:17:fc:24:e9:b7:71:e3:82:2c:a9:f5: f6:4f:cf:b2:f6:61:4c:29:56:a8:21:37:3e:00:cc: 88:77:e3:5b:aa:20:29:55:f0:56:83:94:ed:04:8b: 00:0c:a4:ac:54:fa:5f:f9:36:54:53:1b:76:c0:28: a1:27:e6:bf:87:5e:85:ca:e9:0f:1f:fd:74:e6:f7: 3b:20:11:2d:ec:f6:a1:7c:7e:2e:23:d4:de:cc:10: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:43:1B:15:85:81:34:94:2E:40:99:EA:66:F7:B7:5C:70:57:4B:2C X509v3 Authority Key Identifier: keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:13:a9:1b:5d:db:4c:e1:a0:59:bf:4c:52:41:15:f3:14:f4: 48:2d:5c:a9:aa:47:9d:d4:81:bf:f1:71:c5:e4:a5:ec:9b:b0: f6:64:19:8d:43:6a:9b:71:57:71:2a:7c:f1:b9:2a:15:7f:46: 36:41:2c:2b:f8:10:85:94:73:0f:23:74:10:b3:7a:01:ec:7d: 4f:4c:59:f4:30:b9:f0:af:5d:35:da:9a:65:8f:26:22:4a:32: f5:ac:09:e5:97:d6:a7:e6:ee:8c:bb:14:86:f0:8e:78:e2:37: 83:06:8b:ff:c2:02:66:d3:6b:1e:39:4e:bf:f0:b6:28:27:b5: 10:f7:dc:cf:d1:7b:46:61:5b:09:d4:69:2d:78:6f:eb:85:da: 0c:a1:4a:e0:38:d4:ae:e1:9b:09:16:9c:c5:0a:c3:4a:23:81: 99:91:fb:2b:09:df:37:6a:0d:bf:4b:7c:f7:c2:50:4b:ba:66: de:cc:af:54:68:f6:d4:4c:33:ff:ef:d6:c4:88:b7:7a:00:56: 61:1f:26:55:c5:14:9a:65:a7:ae:b2:a6:e1:fc:03:2a:cd:92: e4:39:a3:70:e2:75:f1:78:8d:8c:c3:9b:2c:5c:b7:1d:d1:3a: a4:e9:c2:99:af:b0:c8:1b:e3:82:f5:e5:bb:85:dd:75:38:1b: d0:1f:86:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2r1VMPguX2/xKhEkGQGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3 N2Q0ZDEwHhcNMjUxMjIxMDMwMTIxWhcNMjUxMjIyMDMwMTIxWjAzMTEwLwYDVQQD EygyMDQzMWIxNTg1ODEzNDk0MmU0MDk5ZWE2NmY3Yjc1YzcwNTc0YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQlkMWjJwMPM2W/V2pemWnzpLURr j7YHTvmpoYBzpxUEHZJd980KzS7lwnrqmX9c3wILvvBuPPrOMoKiAMRv6voYj82g kSSgOmG7fESsUaDBJUlX3W/fcKOTAUUBTfH80PTUxF/m5Xi7rekXFGMxiwZHhZ/h MRSauHdBHUCUXW0TaM7p9Ax9P/Hu/7KH9IEFVbjo55YZinHDWGpklaIY6m0LlQ4M uzUWF/wk6bdx44IsqfX2T8+y9mFMKVaoITc+AMyId+NbqiApVfBWg5TtBIsADKSs VPpf+TZUUxt2wCihJ+a/h16FyukPH/105vc7IBEt7PahfH4uI9TezBDoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBDGxWFgTSULkCZ6mb3t1xwV0ssMB8GA1UdIwQY MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2 LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxOpG13b TOGgWb9MUkEV8xT0SC1cqapHndSBv/FxxeSl7Juw9mQZjUNqm3FXcSp88bkqFX9G NkEsK/gQhZRzDyN0ELN6Aex9T0xZ9DC58K9dNdqaZY8mIkoy9awJ5ZfWp+bujLsU hvCOeOI3gwaL/8ICZtNrHjlOv/C2KCe1EPfcz9F7RmFbCdRpLXhv64XaDKFK4DjU ruGbCRacxQrDSiOBmZH7KwnfN2oNv0t898JQS7pm3syvVGj21Ewz/+/WxIi3egBW YR8mVcUUmmWnrrKm4fwDKs2S5DmjcOJ18XiNjMObLFy3HdE6pOnCma+wyBvjgvXl u4XddTgb0B+GxQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:57 2025 by rpki-client